Privacy Policy

InsightFinances ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

Account Information

When you register, we collect your full name, email address, phone number, and country. Passwords are stored using bcrypt hashing and are never stored in plain text.

Usage Data

We collect information about how you use the platform, including which prediction models you access, payment records, and session data.

Communications

Messages sent through our anonymous chat feature are stored to facilitate communication with domain experts. Your identity is never revealed to experts or other users.

2. How We Use Your Information

• To provide and maintain the InsightFinances platform
• To process payments via M-Pesa and PayPal
• To send transactional emails (verification, password reset, payment receipts)
• To send our newsletter (only if you subscribe — you can unsubscribe at any time)
• To improve our prediction models and user experience
• To prevent fraud and ensure platform security

3. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information with:

• Payment processors (Safaricom M-Pesa, PayPal) solely for transaction processing
• Email service providers for transactional emails only
• Law enforcement when required by applicable law

4. Anonymous Chat

Our chat feature is designed to be completely anonymous. When you send a message to a domain expert, your personal identity (name, email, phone) is never visible to them. Experts see messages from "Anonymous User" only. This is a core architectural feature of our platform.

5. Cookies & Sessions

We use session cookies to keep you logged in. If you use the "Remember Me" feature, a secure token is stored in a cookie for up to 30 days. We do not use third-party tracking cookies or advertising cookies.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days. Payment records may be retained for up to 7 years for legal compliance.

7. Security

We implement industry-standard security measures including:

• bcrypt password hashing (cost factor 12)
• CSRF protection on all forms
• Input sanitization and prepared statements (PDO)
• HTTPS/TLS encryption for all data transmission
• HTTPOnly, SameSite cookie attributes

8. Your Rights

• Access: Request a copy of all data we hold about you
• Correction: Update your profile information at any time
• Deletion: Delete your account from your profile settings
• Unsubscribe: Opt out of newsletters via the unsubscribe link in any email

9. Children's Privacy

InsightFinances is not intended for users under 18 years of age. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users by email of significant changes. Continued use of the platform after changes constitutes acceptance.

11. Contact

For privacy-related inquiries, contact us at: financialadvisorysystem@gmail.com or via our Contact page.